OpenCode

Reported Context (2)

🔑 OpenCode’s Console breach: API keys potentially exposed for 1.4% of Console users; unauthorized charges reported. Weekly Security Roundup: PHP and Node.js Patches, OpenCode Breach, and More
On October 18, 2026, OpenCode, the open source AI coding agent, disclosed a security breach tied to what it calls a large scale distillation attack. OpenCode says the breach affected 1.4% of OpenCode Console users, OpenCode Says Breach Affected 1.4% of Console Users With Linked AI Providers

CVE (4)

People (1)

Vendors (12)

Products (6)

Tools (3)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.